Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/45f3e69a29be43b879899e491100dbcd0c7b8a2c.roa
File:                     45f3e69a29be43b879899e491100dbcd0c7b8a2c.roa (raw, json)
Hash identifier:          wlbHNmXj6OphfIm3J069wAv0LRgN7U508fh8doZ8Lfo=
Subject key identifier:   8A:67:B7:C3:68:77:E9:FD:7C:70:56:38:3D:13:8D:C6:3D:D5:13:A4
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D37A8
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/45f3e69a29be43b879899e491100dbcd0c7b8a2c.roa
Signing time:             Sun 17 Mar 2024 18:42:40 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        190.144.0.0/14 maxlen: 24
                          186.84.0.0/14 maxlen: 24
                          186.80.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2963368 (0x2d37a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=45f3e69a29be43b879899e491100dbcd0c7b8a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4d:fb:98:d7:db:34:89:fd:cd:92:27:2a:9b:
                    40:91:b3:ed:e9:22:e5:e4:43:b0:7a:3b:0b:09:13:
                    46:28:bd:62:82:79:ba:98:ce:13:e8:d0:15:96:b3:
                    af:73:fd:63:ba:9c:75:43:58:34:63:1e:5c:24:08:
                    ff:2f:38:51:2f:f5:e0:1a:53:83:b0:a5:30:3c:5e:
                    da:35:96:21:f3:23:5e:06:5f:ea:8c:11:ac:39:bf:
                    18:aa:e4:9f:9b:88:db:6e:7d:e1:85:9d:ac:8a:ba:
                    82:81:6a:82:86:c4:0a:ab:03:bd:6f:a1:4b:5e:e4:
                    fd:bc:7d:c4:2c:89:b7:1c:bf:2c:0d:f6:74:5f:70:
                    b3:d0:52:83:a9:bf:f2:c5:c1:05:c9:1f:b1:9d:99:
                    41:78:93:10:ae:23:54:cf:7a:c8:74:98:74:c8:b5:
                    48:3f:ed:1f:bd:59:b7:7a:4a:21:80:60:85:ce:b1:
                    1c:bb:10:ff:89:1f:ac:7f:4b:a8:5e:a9:3f:f0:69:
                    2e:16:59:f7:a2:c0:e6:fc:6b:80:ff:3d:62:5f:3b:
                    bf:94:d0:73:ef:67:c9:65:77:39:08:93:45:c1:c9:
                    99:6a:65:37:a4:13:f6:3e:51:c1:a6:ee:ce:78:d5:
                    b6:c1:fd:4c:96:a6:82:5a:ec:06:cf:e0:1c:70:ca:
                    8e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:67:B7:C3:68:77:E9:FD:7C:70:56:38:3D:13:8D:C6:3D:D5:13:A4
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/45f3e69a29be43b879899e491100dbcd0c7b8a2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.80.0.0/13
                  190.144.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         0f:6e:9f:24:9b:70:96:36:bd:2b:96:f1:fa:cb:49:5b:1d:03:
         46:e0:9d:f8:72:31:3a:43:05:66:6b:13:45:fd:bb:cd:ee:1d:
         cb:ba:fb:9e:dd:f2:9c:73:0c:aa:08:12:72:c7:19:4c:55:ed:
         92:a7:82:e4:ce:bd:e0:b6:1d:5f:9d:cb:a8:80:d5:65:4e:6c:
         65:5e:4e:d8:fc:6b:61:b3:99:6b:7d:3c:d1:db:f1:f3:bc:ac:
         90:ee:d8:2f:50:dd:bb:91:d1:7e:1c:57:57:4a:9b:1f:a6:21:
         f7:97:1e:d1:f3:b4:ec:44:aa:38:32:65:aa:72:5d:8e:bb:28:
         3e:8c:29:e7:35:4d:37:73:70:4b:2e:e0:78:74:d2:88:75:64:
         71:be:85:a1:83:1e:cf:25:18:78:a3:32:8e:89:a4:84:dc:64:
         27:44:8c:cd:71:d2:21:79:e8:67:c7:99:96:17:b3:1e:91:ce:
         9b:77:d9:b7:24:7d:94:c3:86:4d:b4:b6:b6:e7:1a:fe:6b:9e:
         86:62:d2:e6:c5:0d:b4:1d:85:dc:6f:cc:01:85:ed:4c:93:79:
         d9:56:e1:b3:81:42:d1:db:25:d8:4c:ca:6c:4d:ee:7f:2d:31:
         51:dc:c6:0e:8f:a9:ff:41:5c:fb:cd:fe:59:7f:70:b7:59:a8:
         5a:ea:05:36
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIDLTeoMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE4
NjZjNDViMjE3ODdlMTJhZjRkZWFmYzA4NTMwM2U3ODZmNTBiMmYwHhcNMjQwMzE3
MTg0MjE5WhcNMjkwMzE3MTg0MjE5WjAzMTEwLwYDVQQDEyg0NWYzZTY5YTI5YmU0
M2I4Nzk4OTllNDkxMTAwZGJjZDBjN2I4YTJjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAzU37mNfbNIn9zZInKptAkbPt6SLl5EOwejsLCRNGKL1ignm6
mM4T6NAVlrOvc/1jupx1Q1g0Yx5cJAj/LzhRL/XgGlODsKUwPF7aNZYh8yNeBl/q
jBGsOb8YquSfm4jbbn3hhZ2sirqCgWqChsQKqwO9b6FLXuT9vH3ELIm3HL8sDfZ0
X3Cz0FKDqb/yxcEFyR+xnZlBeJMQriNUz3rIdJh0yLVIP+0fvVm3ekohgGCFzrEc
uxD/iR+sf0uoXqk/8GkuFln3osDm/GuA/z1iXzu/lNBz72fJZXc5CJNFwcmZamU3
pBP2PlHBpu7OeNW2wf1MlqaCWuwGz+AccMqOkwIDAQABo4ICXzCCAlswHQYDVR0O
BBYEFIpnt8Nod+n9fHBWOD0TjcY91ROkMB8GA1UdIwQYMBaAFMLSc6Z8Bh9jCzEo
oEBMvuztIjGIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTg2NmM0
NWIyMTc4N2UxMmFmNGRlYWZjMDg1MzAzZTc4NmY1MGIyZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhLzQ1ZjNlNjlhMjliZTQzYjg3OTg5OWU0OTExMDBkYmNkMGM3YjhhMmMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvMTg2NmM0NWIyMTc4N2UxMmFmNGRlYWZjMDg1MzAzZTc4NmY1MGIy
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAjBggrBgEFBQcBBwEB/wQU
MBIwEAQCAAEwCgMDA7pQAwMCvpAwDQYJKoZIhvcNAQELBQADggEBAA9unySbcJY2
vSuW8frLSVsdA0bgnfhyMTpDBWZrE0X9u83uHcu6+57d8pxzDKoIEnLHGUxV7ZKn
guTOveC2HV+dy6iA1WVObGVeTtj8a2GzmWt9PNHb8fO8rJDu2C9Q3buR0X4cV1dK
mx+mIfeXHtHztOxEqjgyZapyXY67KD6MKec1TTdzcEsu4Hh00oh1ZHG+haGDHs8l
GHijMo6JpITcZCdEjM1x0iF56GfHmZYXsx6Rzpt32bckfZTDhk20trbnGv5rnoZi
0ubFDbQdhdxvzAGF7UyTedlW4bOBQtHbJdhMymxN7n8tMVHcxg6Pqf9BXPvN/ll/
cLdZqFrqBTY=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:14 2024 by rpki-client on console-ams.rpki-client.org